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DETAILED ACTION 
Claim Rejections - 35 USC § 103 

The following is a quotation of 35 U.S.C. 103(a) which forms the basis for all 
obviousness rejections set forth in this Office action: 

(a) A patent may not be obtained though the invention is not identically disclosed or described as set 
forth in section 1 02 of this title, if the differences between the subject matter sought to be patented and 
the prior art are such that the subject matter as a whole would have been obvious at the time the 
invention was made to a person having ordinary skill in the art to which said subject matter pertains. 
Patentability shall not be negatived by the manner in which the invention was made. 

The factual inquiries set forth in Graham v. John Deere Co., 383 U.S. 1, 148 

USPQ 459 (1966), that are applied for establishing a background for determining 

obviousness under 35 U.S.C. 103(a) are summarized as follows: 

1 . Determining the scope and contents of the prior art. 

2. Ascertaining the differences between the prior art and the claims at issue. 

3. Resolving the level of ordinary skill in the pertinent art. 

4. Considering objective evidence present in the application indicating 
obviousness or nonobviousness. 

Claims 1 and 5 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Dent et al in view of Tsubakiyama (US005544245A). 

Regarding claim 1, Dent et al disclose bi-directional authentication between a 
mobile station and a base station, so that it is not only the base station that requires the 
identity of the mobile station, but the mobile station that requires the identity of the base 
station (see column 1, line 67 - column 2, line 7), which reads on the claimed, "mobile 
terminal in a mobile communication system for authenticating a communicating party 
when communication is performed between the mobile terminal and a device on the 
side of a network." After the base station authenticates the mobile station, the base 
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station forms a response signal from a further random number RAND2 and form the 
personal identification number PIN of the mobile, this number being known in the base 
station and this is sent to the mobile station. The mobile station forms a value of 
RESP2 from its PIN and the received number RAND2 and compares this formed value 
with the received RESP2. If the two values coincide, the method proceeds (see column 
3, lines 4-34 and figure 2), which reads on the claimed, "authentication processing 
means which, when a request signal requesting operation execution is received from a 
network device, is for executing authentication processing to check whether said 
request signal is a request signal from an authorized network device; and operation 
execution means for executing an operation that is in accordance with said request 
signal only if authentication that the network device is an authorized network device is 
obtained," wherein the request signal requesting operation execution is the random 
number sent from the base station requesting a connection. A random number is sent 
from the BS and the MS responds. The BS calculates and compares the response, 
then forms another response and sends it to the MS. The MS calculates a response 
and compares and forms another response to the BS and sends it (see figure 2), which 
reads on the claimed, "means for storing an identifier and key information of a mobile 
terminal. ..an authentication operation unit for executing a prescribed authentication 
operation using said key information and random number; an authentication request 
signal transmitter for creating an authentication request signal transmitter for creating an 
authentication request signal, which includes said terminal identifier and random 
number, and sending this signal to the network device; a receiver for receiving an 
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authentication result, which has been obtained by an authentication operation 
performed on the network side, from the network device; and a comparator for 
comparing the authentication result computed by the mobile terminal and the 
authentication result sent form the network device; and said operation execution means 
executes the operation that is in accordance with said request signal upon deciding that 
the network device is an authorized network device when the compared results agree." 
Dent et al fail to expressly disclose that the mobile terminal includes a random number 
generator. 

In a similar field of endeavor, Tsubakiyama discloses a system where the mobile 
terminal generates a random number (see column 4, lines 38-42). 

It would have been obvious to a person of ordinary skill in the art at the time of 
the invention to modify Dent et ai with Tsubakiyama to include the above random 
number generator at the mobile unit in order to greatly contribute to future network 
security while the extra burden on the system is very slight (see column 5, lines 17-34). 

Regarding claim 5, Dent et al disclose bi-directional authentication between a 
mobile station and a base station, so that it is not only the base station that requires the 
identity of the mobile station, but the mobile station that requires the identity of the base 
station (see column 1, line 67 - column 2, line 7), which reads on the claimed, "mobile 
communication system for authenticating a communicating party when communication 
is performed between a mobile terminal and a device on the side of a network." After 
the base station authenticates the mobile station, the base station forms a response 
signal from a further random number RAND2 and form the personal identification 
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number PIN of the mobile, this number being known in the base station and this is sent 
to the mobile station. The mobile station forms a value of RESP2 from its PIN and the 
received number RAND2 and. compares this formed value with the received RESP2. If 
the two values coincide, the method proceeds (see column 3, lines 4-34 and figure 2), 
which reads on the claimed, "authentication processing means which, when a signal 
requesting execution of a prescribed operation has been received from a network 
device, is for sending an authentication request signal to the network device in order to 
determine whether said request signal is a request signal from an authorized network 
device; performing an authentication operation; and comparing result of this 
authentication operation with result of an authentication operation sent from the network 
device; and operation execution means for executing an operation that is in accordance 
with said request signal only if authentication that the network device is an authorized 
network device is obtained; and said network device includes an authentication 
operation unit for executing an authentication operation based upon an authentication 
request signal received from said mobile terminal based upon an authentication request 
signal received from said mobile terminal, and sending result of this authentication 
operation to the mobile terminal," wherein the request signal requesting operation 
execution is the random number sent from the base station requesting a connection. A 
random number is sent from the BS and the MS responds. The BS calculates and 
compares the response, then forms another response and sends it to the MS. The MS 
calculates a response and compares and forms another response to the BS and sends 
it (see figure 2), which reads on the claimed, "means for storing an identifier and key 
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information of a mobile terminal. ..an authentication operation unit for executing a 
prescribed authentication operation using said key information and random number; an 
authentication request signal transmitter for creating an authentication request signal 
transmitter for creating an authentication request signal, which includes said terminal 
identifier and random number, and sending this signal to the network-device; a receiver 
for receiving an authentication result, which has been obtained by an authentication 
operation performed on the network side, from the network device; and a comparator for 
comparing the authentication result computed by the mobile terminal and the 
authentication result sent form the network device; and said operation execution means 
executes the operation that is in accordance with said request signal upon deciding that 
the network device is an authorized network device when the compared results agree." 
Dent et al fail to expressly disclose that the mobile terminal includes a random number 
generator. 

In a similar field of endeavor, Tsubakiyama discloses a system where the mobile 
terminal generates a random number (see column 4, lines 38-42). 

It would have been obvious to a person of ordinary skill in the art at the time of 
the invention to modify Dent et al with Tsubakiyama to include the above random 
number generator at the mobile unit in order to greatly contribute to future network 
security while the extra burden on the system is very slight (see column 5, lines 17-34). 

Claims 4 and 8 are rejected under 35 U.S.C. 103(a) as being unpatentable over 
Dent et al in view of Tsubakiyama, and further in view of Hayashi et al. 
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Regarding claim 4, Dent et al disclose bi-directional authentication between a 
mobile station and a base station, so that it is not only the base station that requires the 
identity of the mobile station, but the mobile station that requires the identity of the base 
station (see column 1, line 67 - column 2, line 7), which reads on the claimed, "network 
device in a mobile communication system for authenticating a network device by 
comparing, at a mobile terminal, authentication results computed by respective ones of 
the mobile terminal and network device when communication is performed between 
these two devices." After the base station authenticates the mobile station, the base 
station forms a response signal from a further random number RAND2 and form the 
personal identification number PIN of the mobile, this number being known in the base 
station and this is sent to the mobile station. The mobile station forms a value of 
RESP2 from its PIN and the received number RAND2 and compares this formed value 
with the received RESP2. If the two values coincide, the method proceeds (see column 
3, lines 4-34 and figure 2), which reads on the claimed, "means for sending a signal, 
which requests that a mobile terminal execute a prescribed operation, to said mobile 
terminal.. .a receiver for receiving, from the mobile terminal that has received said 
request signal, an authentication request signal that includes the identifier and random 
number of said mobile terminal," and, "an authentication operation unit for executing an 
authentication operation," and, "a transmitting unit for transmitting the authentication 
result to the mobile terminal." A random number is sent from the BS and the MS 
responds. The BS calculates and compares the response, then forms another 
response and sends it to the MS. The MS calculates a response and compares and 
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forms another response to the BS and sends it (see figure 2), which reads on the 
claimed, "means for storing an identifier and key information of said mobile terminal. ..an 
authentication operation unit for executing a prescribed authentication operation using 
said key information and random number; an authentication request signal transmitter 
for creating an authentication request signal transmitter for creating an authentication 
request signal, which includes said terminal identifier and random number, and sending 
this signal to the network device; a receiver for receiving an authentication result from 
the network device; and a comparator for comparing the authentication result computed 
by the mobile terminal and the authentication result sent from the network device." Dent 
et al fail to expressly disclose that the mobile terminal includes a random number 
generator. 

In a similar field of endeavor, Tsubakiyama discloses a system where the mobile 
terminal generates a random number (see column 4, lines 38-42). 

It would have been obvious to a person of ordinary skill in the art at the time of 
the invention to modify Dent et al with Tsubakiyama to include the above random 
number generator at the mobile unit in order to greatly contribute to future network 
security while the extra burden on the system is very slight (see column 5, lines 17-34). 
The combination of Dent et al and Tsubakiyama fails to disclose the use of a table for 
storing correspondence between an identifier and key information of a mobile terminal 
and a key-information acquisition unit for acquiring key information, which corresponds 
to the received identifier of the mobile terminal, from said table. 
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In a similar field of endeavor, Hayashi et al disclose the use of a database to 
store the necessary information for authentication (see column 3, lines 7-33). 

It would have been obvious to a person of ordinary skill in the art at the time of 
the invention to modify the combination of Dent et al and Tsubakiyama with Hayashi et 
al to include the above storage of authorization information in order to avoid using the 
processing resources to compute the data. 

Regarding claim 8, the combination of Dent et al and Tsubakiyama discloses 
that after the base station authenticates the mobile station, the base station forms a 
response signal from a further random number RAND2 and form the personal 
identification number PIN of the mobile, this number being known in the base station 
and this is sent to the mobile station. The mobile station forms a value of RESP2 from 
its PIN and the received number RAND2 and compares this formed value with the 
received RESP2. If the two values coincide, the method proceeds (see Dent et al 
column 3, lines 4-34 and figure 2), which reads on the claimed, "means for sending a 
mobile terminal a request signal requesting execution of an operation... a receiver for 
receiving, from a mobile terminal that has received said request signal requesting 
execution of the operation, an authentication request signal that includes an 
identifier... of said mobile terminal," and, "an authentication operation unit executes an 
authentication operation," and, "sending result of the authentication operation to the 
mobile terminal." Dent et al fails to disclose the use of a table for storing 
correspondence between an identifier and key information of a mobile terminal and a 
key-information acquisition unit for acquiring key information, which corresponds to the 
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received identifier of the mobile terminal, from said table or the random number being 
sent from the terminal. 

In a similar field of endeavor, Hayashi et al disclose the use of a database to 
store the necessary information for authentication (see column 3, lines 7-33) and a 
random number generating unit at the mobile terminal. 

It would have been obvious to a person of ordinary skill in the art at the time of 
the invention to modify the combination of Dent et al and Tsubakiyama with Hayashi et 
al to include the above storage of authorization information and random number 
generating unit at the mobile in order to avoid using the processing resources to 
compute the data and generate and send random numbers at the network. 

Claim 3 is rejected under 35 U.S.C. 103(a) as being unpatentable over Dent et al 
in view of Rosenthal et al (US005737701). 

Regarding claim 3, Dent et al disclose bi-directional authentication between a 
mobile station and a base station, so that it is not only the base station that requires the 
identity of the mobile station, but the mobile station that requires the identity of the base 
station (see column 1, line 67 - column 2, line 7), which reads on the claimed, "mobile 
terminal in a mobile communication system for authenticating a communicating party 
when communication is performed between the mobile terminal and a device on the 
side of a network." After the base station authenticates the mobile station, the base 
station forms a response signal from a further random number RAND2 and form the 
personal identification number PIN of the mobile, this number being known in the base 
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station and this is sent to the mobile station. The mobile station forms a value of 
RESP2 from its PIN and the received number RAND2 and compares this formed value 
with the received RESP2. If the two values coincide, the method proceeds (see column 
3, lines 4-34 and figure 2), which reads on the claimed, "authentication processing 
means which, when a request signal requesting operation execution is received from a 
network device, is for executing authentication processing to check whether said 
request signal is a request signal from an authorized network device; and operation 
execution means for executing an operation that is in accordance with said request 
signal only if authentication that the network device is an authorized network device is 
obtained." Dent et al further disclose bi-directional authentication between a mobile 
station and a base station, so that it is not only the base station that requires the identity 
of the mobile station, but the mobile station that requires the identity of the base station 
before a call is completed (see column 1 , line 67 - column 2, line 7), which reads on the 
claimed, "said authentication processing means executes authentication processing if a 
request is one requiring authentication, and said operation execution means executes 
the operation that is in accordance with said request signal if authentication that the 
network device is an authorized network device is obtained." Dent et al fail to disclose 
an authentication necessity table which indicates whether each request received from 
the network device requires authentication and forgoing authentication processing if a 
request is not one requiring authentication. 
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In a similar field of endeavor, Rosenthal et al disclose a table that can be 
searched for instances where authentication is waived (see figure 3 and column 6, lines 
20-28). 

It would have been obvious to a person of ordinary skill in the art at the time of 
the invention to modify Dent et al with Rosenthal et al to include the above 
authentication database in order to reduce the likelihood of communications fraud by 
decreasing the exposure of the authentication code as suggested by Rosenthal et al 
(see column 3, lines 52-57). 

Claim 7 is rejected under 35 U.S.G. 103(a) as being unpatentable over Dent et al 
in view of Jiang et al (US 20020057678A1), and further in view of Rosenthal et al. 

Regarding claim 7, Dent et al disclose bi-directional authentication between a 
mobile station and a base station, so that it is not only the base station that requires the 
identity of the mobile station, but the mobile station that requires the identity of the base 
station (see column 1, line 67 - column 2, line 7), which reads on the claimed, "mobile 
communication system for authenticating a communicating party when communication 
is performed between a mobile terminal and a device on the side of a network." After 
the base station authenticates the mobile station, the base station forms a response 
signal from a further random number RAND2 and form the personal identification 
number PIN of the mobile, this number being known in the base station and this is sent 
to the mobile station. The mobile station forms a value of RESP2 from its PIN and the 
received number RAND2 and compares this formed value with the received RESP2. If 
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the two values coincide, the method proceeds (see column 3, lines 4-34 and figure 2), 
which reads on the claimed, "authentication processing means which, when a signal 
requesting execution of a prescribed operation has been received from a network 
device, is for sending an authentication request signal to the network device in order to 
determine whether said request signal is a request signal from an authorized network 
device; performing an authentication operation; and comparing result of this 
authentication operation with result of an authentication operation sent from the network 
device; and operation execution means for executing an operation that is in accordance 
with said request signal only if authentication that the network device is an authorized 
network device is obtained; and said network device includes an authentication 
operation unit for executing an authentication operation based upon an authentication 
request signal received from said mobile terminal based upon an authentication request 
signal received from said mobile terminal, and sending result of this authentication 
operation to the mobile terminal." Dent et al further disclose bi-directional authentication 
between a mobile station and a base station, so that it is not only the base station that 
requires the identity of the mobile station, but the mobile station that requires the identity 
of the base station before a call is completed (see column 1 , line 67 - column 2, line 7), 
which reads on the claimed, "said authentication processing means executes 
authentication processing if a request is one requiring authentication, and said operation 
execution means executes the operation that is in accordance with said request signal if 
authentication that the network device is an authorized network device is obtained." 
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Dent et al fail to expressly disclose forgoing authentication processing if a request is not 
one requiring authentication. 

In a similar field of endeavor, Jiang et al disclose skipping authentication if it is 
not necessary for a particular application (see paragraph 208). 

It would have been obvious to a person of ordinary skill in the art at the time of 
the invention to modify Dent et al with Jiang et al to include the above skipping 
authentication when not necessary for an application in order to conserve system 
resources. The combination of Dent et al and Jiang et al fails to disclose an 
authentication necessity table which indicates whether each request received from the 
network device requires authentication and forgoing authentication processing if a 
request is not one requiring authentication. 

In a similar field of endeavor, Rosenthal et al disclose a table that can be 
searched for instances where authentication is waived (see figure 3 and column 6, lines 
20-28). 

It would have been obvious to a person of ordinary skill in the art at the time of 
the invention to modify Dent et al with Rosenthal et al to include the above 
authentication database in order to reduce the likelihood of communications fraud by 
decreasing the exposure of the authentication code as suggested by Rosenthal et al 
(see column 3, lines 52-57). 
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Claims 9, 10 and 11 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Dent et al in view of Tsubakiyama et al, and further in view of Lipovski (US 
2004008731 8A1). 

Regarding claim 9, Dent et al disclose bi-directional authentication between a 
mobile station and a base station, so that it is not only the base station that requires the 
identity of the mobile station, but the mobile station that requires the identity of the base 
station (see column 1, line 67 - column 2, line 7), which reads on the claimed, "mobile 
communication system for authenticating a communicating party when communication 
is performed between a mobile terminal and a device on the side of a network." After 
the base station authenticates the mobile station, the base station forms a response 
signal from a further random number RAND2 and form the personal identification 
number PIN of the mobile, this number being known in the base station and this is sent 
to the mobile station. The mobile station forms a value of RESP2 from its PIN and the 
received number RAND2 and compares this formed value with the received RESP2. If 
the two values coincide, the method proceeds (see column 3, lines 4-34 and figure 2), 
which reads on the claimed, "authentication processing means which, when a signal 
requesting execution of a prescribed operation has been received from a network 
device, is for sending an authentication request signal to the network device in order to 
determine whether said request signal is a request signal from an authorized network 
device; performing an authentication operation; and comparing result of this 
authentication operation with result of an authentication operation sent from the network 
device; and operation execution means for executing an operation that is in accordance 
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with said request signal only if authentication that the network device is an authorized 
network device is obtained; and said network device includes an authentication 
operation unit for executing an authentication operation based upon an authentication 
request signal received from said mobile terminal based upon an authentication request 
signal received from said mobile terminal, and sending result of this authentication 
operation to the mobile terminal." A random number is sent from the BS and the MS 
responds. The BS calculates and compares the response, then forms another 
response and sends it to the MS. The MS calculates a response and compares and 
forms another response to the BS and sends it (see figure 2), which reads on the 
claimed, "means for storing an identifier and key information of a mobile terminal... an 
authentication operation unit for executing a prescribed authentication operation using 
said key information and random number; an authentication request signal transmitter 
for creating an authentication request signal transmitter for creating an authentication 
request signal, which includes said terminal identifier and random number, and sending 
this signal to the network device; a receiver for receiving an authentication result from 
the network device; and a comparator for comparing the authentication result computed 
by the mobile terminal and the authentication result sent from the network device." Dent 
et al fail to expressly disclose that the mobile terminal includes a random number 
generator. 

In a similar field of endeavor, Tsubakiyama discloses a system where the mobile 
terminal generates a random number (see column 4, lines 38-42). 
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It would have been obvious to a person of ordinary skill in the art at the time of 
the invention to modify Dent et al with Tsubakiyama to include the above random 
number generator at the mobile unit in order to greatly contribute to future network 
security while the extra burden on the system is very slight (see column 5, lines 17-34). 
The combination of Dent et al and Tsubakiyama fails to disclose the request signal 
requesting operation execution is a signal requesting that emission of radio waves be 
inhibited. 

In a similar field of endeavor, Lipovski discloses a transmitter sending a signal 
requesting a terminal to mute radio frequency generation (see paragraph 20). 

It would have been obvious to a person of ordinary skill in the art at the time of 
the invention to modify Dent et al with Lipovski to include the above signal muting radio 
frequency generation in order to automatically restrict devices where they would create 
a distraction or in airplanes (see paragraphs 3-4). 

Regarding claim 10, the combination of Dent et al and Tsubakiyama fails to 
disclose the request signal requesting operation execution is a signal requesting that 
inhibition of emission of radio waves be cancelled. 

In a similar field of endeavor, Lipovski discloses a transmitter sending a signal 
requesting a terminal to mute radio frequency generation, then at the exit, another to 
allow transmission (see paragraph 20). 

It would have been obvious to a person of ordinary skill in the art at the time of 
the invention to modify the combination of Dent et al and Tsubakiyama with Lipovski to 
include the above signal muting radio frequency generation and allowance in order to 
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automatically restrict devices where they would create a distraction or in airplanes (see 
paragraphs 3-4) and to provide minimum inconvenience to the user. 

Regarding claim 1 1 , the combination of Dent et al and Tsubakiyama fails to 
disclose the request signal requesting operation execution is a signal requesting that 
the mobile station make a transmission to power cut-off or to a standby operation. 

In a similar field of endeavor, Lipovski discloses a transmitter sending a signal 
requesting a terminal to mute radio frequency generation (see paragraph 20), which 
reads on the claimed, "standby operation." 

It would have been obvious to a person of ordinary skill in the art at the time of 
the invention to modify the combination of Dent et al and Tsubakiyama with Lipovski to 
include the above signal muting radio frequency generation in order to automatically 
restrict devices where they would create a distraction or in airplanes (see paragraphs 3- 
4). 

Claims 12, 14 and 15 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Dent et al in view of Tsubakiyama, and further in view of Durst et al (US 
200301 22707A1). 

Regarding claim 12, the combination of Dent et al and Tsubakiyama fail to 
disclose that the request signal requesting operation execution is a signal requesting 
disclosure of mobile terminal information possessed by the mobile terminal. 

In a similar field of endeavor, Durst et al disclose a base station transmits a 
location information request to a mobile terminal and the terminal responds with current 
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location information (see paragraph 39), which reads on the claimed, "said request 
signal requesting operation execution is a signal requesting disclosure of mobile 
terminal information possessed by the mobile terminal." 

It would have been obvious to a person of ordinary skill in the art at the time of 
the invention to modify the combination of Dent et al and Tsubakiyama with Durst et al 
to include the above location information update in order to assist the authorities in case 
of an emergency by providing the location of a user. 

Regarding claim 14, the combination of Dent et al and Tsubakiyama fail to 
disclose the mobile terminal information is status information of the mobile terminal. 

In a similar field of endeavor, Durst et al disclose a base station transmits a 
location information request to a mobile terminal and the terminal responds with current 
location information (see paragraph 39), which reads on the claimed, "said mobile 
terminal information is status information of the mobile terminal." 

It would have been obvious to a person of ordinary skill in the art at the time of 
the invention to modify the combination of Dent et al and Tsubakiyama with Durst et al 
to include the above location information update in order to assist the authorities in case 
of an emergency by providing the location of a user. 

Regarding claim 15, the combination of Dent et al and Tsubakiyama fail to 
disclose the status information is voltage information indicating residual capacity of a 
battery of the terminal, or traveling-velocity information measured by a mobile unit, or 
present-position information detected by a mobile unit. 
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In a similar field of endeavor, Durst et al disclose a base station transmits a 
location information request to a mobile terminal and the terminal responds with current 
location information (see paragraph 39), which reads on the claimed, "said status 
information is voltage information indicating residual capacity of a battery of the 
terminal, or traveling-velocity information measured by a mobile unit, or present-position 
information detected by a mobile unit." 

It would have been obvious to a person of ordinary skill in the art at the time of 
the invention to modify the combination of Dent et al and Tsubakiyama with Durst et al 
to include the above location information update in order to assist the authorities in case 
of an emergency by providing the location of a user. 

Claim 13 is rejected under 35 U.S.C. 103(a) as being unpatentable over Dent et 
al in view of Tsubakiyama and Durst et al, as applied to claim 12 above, and further in 
view of Mills (US005915225A). 

Regarding claim 13, the combination of Dent et al, Tsubakiyama and Durst et al 
fails to expressly disclose that the mobile terminal information is user settings 
information that a user of the mobile terminal has stored beforehand in a storage unit of 
the mobile terminal. 

In a similar field of endeavor, Mills discloses a system that allows the mobile 
telecommunications network to request and retrieve the desired subscriber information 
stored in a SIM card via over-the-air connection-less signals (see column 5, lines 1-13). 
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It would have been obvious to a person of ordinary skill in the art at the time of 
the invention to modify the combination of Dent et al, Tsubakiyama and Durst et al with 
Mills to include the above network requesting subscriber information in order to 
eliminate the need for a subscriber to verbally provide details or tediously enter a long 
series of numbers while on the phone as suggested by Mills (see column 4, line 56 - 
column 5, line 13). 

Claims 16 and 17 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Dent et al in view of Tsubakiyama, and further in view of Rosenthal et al. 

Regarding claim 16, Dent et al disclose bi-directional authentication between a 
mobile station and a base station, so that it is not only the base station that requires the 
identity of the mobile station, but the mobile station that requires the identity of the base 
station (see column 1, line 67 - column 2, line 7), which reads on the claimed, "mobile 
terminal in a mobile communication system for authenticating a communicating party 
when communication is performed between the mobile terminal and a device on the 
side of a network." After the base station authenticates the mobile station, the base 
station forms a response signal from a further random number RAND2 and form the 
personal identification number PIN of the mobile, this number being known in the base 
station and this is sent to the mobile station. The mobile station forms a value of 
RESP2 from its PIN and the received number RAND2 and compares this formed value 
with the received RESP2. If the two values coincide, the method proceeds (see column 
3, lines 4-34 and figure 2), which reads on the claimed, "authentication processing 
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means which, when a request signal requesting operation execution is received from a 
network device, is for executing authentication processing to check whether said 
request signal is a request signal from an authorized network device; and operation 
execution means for executing an operation that is in accordance with said request 
signal only if authentication that the network device is an authorized network device is 
obtained," wherein the request signal requesting operation execution is the random 
number sent from the base station requesting a connection. A random number is sent 
from the BS and the MS responds. The BS calculates and compares the response, 
then forms another response and sends it to the MS. The MS calculates a response 
and compares and forms another response to the BS and sends it (see figure 2), which 
reads on the claimed, "means for storing an identifier and key information of a mobile 
terminal.. .an authentication operation unit for executing a prescribed authentication 
operation using said key information and random number; an authentication request 
signal transmitter for creating an authentication request signal transmitter for creating an 
authentication request signal, which includes said terminal identifier and random 
number, and sending this signal to the network device; a receiver for receiving an 
authentication result, which has been obtained by an authentication operation 
performed on the network side, from the network device; and a comparator for 
comparing the authentication result computed by the mobile terminal and the 
authentication result sent form the network device; and said operation execution means 
executes the operation that is in accordance with said request signal upon deciding that 
the network device is an authorized network device when the compared results agree." 
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Dent et al fail to expressly disclose that the mobile terminal includes a random number 
generator. 

In a similar field of endeavor, Tsubakiyama discloses a system where the mobile 
terminal generates a random number (see column 4, lines 38-42). 

It would have been obvious to a person of ordinary skill in the art at the time of 
the invention to modify Dent et al with Tsubakiyama to include the above random 
number generator at the mobile unit in order to greatly contribute to future network 
security while the extra burden on the system is very slight (see column 5, lines 17-34). 
The combination of Dent et al and Tsubakiyama fails to disclose an authentication 
necessity table that indicates whether each request received from the network device 
requires authentication. 

In a similar field of endeavor, Rosenthal et al disclose a table that can be 
searched for instances where authentication is waived (see figure 3 and column 6, lines 
20-28). 

It would have been obvious to a person of ordinary skill in the art at the time of 
the invention to modify the combination of Dent et al and Tsubakiyama with Rosenthal 
et al to include the above authentication database in order to reduce the likelihood of 
communications fraud by decreasing the exposure of the authentication code as 
suggested by Rosenthal et al (see column 3, lines 52-57). 

Regarding claim 17, Dent et al disclose bi-directional authentication between a 
mobile station and a base station, so that it is not only the base station that requires the 
identity of the mobile station, but the mobile station that requires the identity of the base 



Application/Control Number: 1 0/646,938 Page 24 

Art Unit: 2617 

station (see column 1, line 67 - column 2, line 7), which reads on the claimed, "mobile 
communication system for authenticating a communicating party when communication 
is performed between a mobile terminal and a device on the side of a network." After 
the base station authenticates the mobile station, the base station forms a response 
signal from a further random number RAND2 and form the personal identification 
number PIN of the mobile, this number being known in the base station and this is sent 
to the mobile station. The mobile station forms a value of RESP2 from its PIN and the 
received number RAND2 and compares this formed value with the received RESP2. If 
the two values coincide, the method proceeds (see column 3, lines 4-34 and figure 2), 
which reads on the claimed, "authentication processing means which, when a signal 
requesting execution of a prescribed operation has been received from a network 
device, is for sending an authentication request signal to the network device in order to 
determine whether said request signal is a request signal from an authorized network 
device; performing an authentication operation; and comparing result of this 
authentication operation with result of an authentication operation sent from the network 
device; and operation execution means for executing an operation that is in accordance 
with said request signal only if authentication that the network device is an authorized 
network device is obtained; and said network device includes an authentication 
operation unit for executing an authentication operation based upon an authentication 
request signal received from said mobile terminal based upon an authentication request 
signal received from said mobile terminal, and sending result of this authentication 
operation to the mobile terminal," wherein the request signal requesting operation 
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execution is the random number sent from the base station requesting a connection. A 
random number is sent from the BS and the MS responds. The BS calculates and 
compares the response, then forms another response and sends it to the MS. The MS 
calculates a response and compares and forms another response to the BS and sends 
it (see figure 2), which reads on the claimed, "means for storing an identifier and key 
information of a mobile terminal. ..an authentication operation unit for executing a 
prescribed authentication operation using said key information and random number; an 
authentication request signal transmitter for creating an authentication request signal 
transmitter for creating an authentication request signal, which includes said terminal 
identifier and random number, and sending this signal to the network device; a receiver 
for receiving an authentication result, which has been obtained by an authentication 
operation performed on the network side, from the network device; and a comparator for 
comparing the authentication result computed by the mobile terminal and the 
authentication result sent form the network device; and said operation execution means 
executes the operation that is in accordance with said request signal upon deciding that 
the network device is an authorized network device when the compared results agree." 
Dent et al fail to expressly disclose that the mobile terminal includes a random number 
generator. 

In a similar field of endeavor, Tsubakiyama discloses a system where the mobile 
terminal generates a random number (see column 4, lines 38-42). 

It would have been obvious to a person of ordinary skill in the art at the time of 
the invention to modify Dent et al with Tsubakiyama to include the above random 
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number generator at the mobile unit in order to greatly contribute to future network 
security while the extra burden on the system is very slight (see column 5, lines 17-34). 
The combination of Dent et al and Tsubakiyama fails to disclose an authentication 
necessity table that indicates whether each request received from the network device 
requires authentication. 

In a similar field of endeavor, Rosenthal et al disclose a table that can be 
searched for instances where authentication is waived (see figure 3 and column 6, lines 
20-28). 

It would have been obvious to a person of ordinary skill in the art at the time of 
the invention to modify the combination of Dent et al and Tsubakiyama with Rosenthal 
et al to include the above authentication database in order to reduce the likelihood of 
communications fraud by decreasing the exposure of the authentication code as 
suggested by Rosenthal et al (see column 3, lines 52-57). 

Claim 18 is rejected under 35 U.S.C. 103(a) as being unpatentable over Dent et 
al in view of Tsubakiyama and Rosenthal et al as applied to claim 17 above, and further 
in view of Hayashi et al. 

Regarding claim 18, the combination of Dent et al, Tsubakiyama and Rosenthal 
et al discloses that after the base station authenticates the mobile station, the base 
station forms a response signal from a further random number RAND2 and form the 
personal identification number PIN of the mobile, this number being known in the base 
station and this is sent to the mobile station. The mobile station forms a value of 
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RESP2 from its PIN and the received number RAND2 and compares this formed value 
with the received RESP2. If the two values coincide, the method proceeds (see Dent et 
al column 3, lines 4-34 and figure 2), which reads on the claimed, "means for sending a 
mobile terminal a request signal requesting execution of an operation... a receiver for 
receiving, from a mobile terminal that has received said request signal requesting 
execution of the operation, an authentication request signal that includes an 
identifier... of said mobile terminal," and, "an authentication operation unit executes an 
authentication operation," and, "sending result of the authentication operation to the 
mobile terminal." Dent et al fails to disclose the use of a table for storing 
correspondence between an identifier and key information of a mobile terminal and a 
key-information acquisition unit for acquiring key information, which corresponds to the 
received identifier of the mobile terminal, from said table or the random number being 
sent from the terminal. 

In a similar field of endeavor, Hayashi et al disclose the use of a database to 
store the necessary information for authentication (see column 3, lines 7-33) and a 
random number generating unit at the mobile terminal. 

It would have been obvious to a person of ordinary skill in the art at the time of 
the invention to modify the combination of Dent et al, Tsubakiyama and Rosenthal et al 
with Hayashi et al to include the above storage of authorization information and random 
number generating unit at the mobile in order to avoid using the processing resources to 
compute the data and generate and send random numbers at the network. 
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Claims 19 and 20 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Dent et al in view of Tsubakiyama and Rosenthal et al as applied to claim 1 7 
above, and further in view of Lipovski. 

Regarding claim 19, the combination of Dent et al, Tsubakiyama and Rosenthal 
et al fails to disclose the request signal requesting operation execution is a signal 
requesting that inhibition of emission of radio waves be cancelled. 

In a similar field of endeavor, Lipovski discloses a transmitter sending a signal 
requesting a terminal to mute radio frequency generation, then at the exit, another to 
allow transmission (see paragraph 20). 

It would have been obvious to a person of ordinary skill in the art at the time of 
the invention to modify the combination of Dent et al, Tsubakiyama and Rosenthal et al 
with Lipovski to include the above signal muting radio frequency generation and 
allowance in order to automatically restrict devices where they would create a 
distraction or in airplanes (see paragraphs 3-4) and to provide minimum inconvenience 
to the user. 

Regarding claim 20, the combination of Dent et al, Tsubakiyama and Rosenthal 
et al fails to disclose the request signal requesting operation execution is a signal 
requesting that the mobile station make a transmission to power cut-off or to a standby 
operation. 

In a similar field of endeavor, Lipovski discloses a transmitter sending a signal 
requesting a terminal to mute radio frequency generation (see paragraph 20), which 
reads on the claimed, "standby operation." 
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It would have been obvious to a person of ordinary skill in the art at the time of 
the invention to modify the combination of Dent et al, Tsubakiyama and Rosenthal et al 
with Lipovski to include the above signal muting radio frequency generation in order to 
automatically restrict devices where they would create a distraction or in airplanes (see 
paragraphs 3-4). 

Claims 21, 23 and 24 are rejected under 35 U.S.C. 103(a) as being unpatentable 
over Dent et al in view of Tsubakiyama and Rosenthal et al, and further in view of Durst 
et al (US20030122707A1). 

Regarding claim 21, the combination of Dent et al, Tsubakiyama and Rosenthal 
et al fails to disclose that the request signal requesting operation execution is a signal 
requesting disclosure of mobile terminal information possessed by the mobile terminal. 

In a similar field of endeavor, Durst et al disclose a base station transmits a 
location information request to a mobile terminal and the terminal responds with current 
location information (see paragraph 39), which reads on the claimed, "said request 
signal requesting operation execution is a signal requesting disclosure of mobile 
terminal information possessed by the mobile terminal." 

It would have been obvious to a person of ordinary skill in the art at the time of 
the invention to modify the combination of Dent et al, Tsubakiyama and Rosenthal et al 
with Durst et al to include the above location information update in order to assist the 
authorities in case of an emergency by providing the location of a user. 
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Regarding claim 23, the combination of Dent et al, Tsubakiyama and Rosenthal 
et al fails to disclose the mobile terminal information is status information of the mobile 
terminal. 

In a similar field of endeavor, Durst et al disclose a base station transmits a 
location information request to a mobile terminal and the terminal responds with current 
location information (see paragraph 39), which reads on the claimed, "said mobile 
terminal information is status information of the mobile terminal." 

It would have been obvious to a person of ordinary skill in the art at the time of 
the invention to modify the combination of Dent et al, Tsubakiyama and Rosenthal et al 
with Durst et al to include the above location information update in order to assist the 
authorities in case of an emergency by providing the location of a user. 

Regarding claim 15, the combination of Dent et al, Tsubakiyama and Rosenthal 
et al fails to disclose the status information is voltage information indicating residual 
capacity of a battery of the terminal, or traveling-velocity information measured by a 
mobile unit, or present-position information detected by a mobile unit. 

In a similar field of endeavor, Durst et al disclose a base station transmits a 
location information request to a mobile terminal and the terminal responds with current 
location information (see paragraph 39), which reads on the claimed, "said status 
information is voltage information indicating residual capacity of a battery of the 
terminal, or traveling-velocity information measured by a mobile unit, or present-position 
information detected by a mobile unit." 
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It would have been obvious to a person of ordinary skill in the art at the time of 
the invention to modify the combination of Dent et al, Tsubakiyama and Rosenthal et al 
with Durst et al to include the above location information update in order to assist the 
authorities in case of an emergency by providing the location of a user. 

Claim 22 is rejected under 35 U.S.C. 103(a) as being unpatentable over Dent et 
al in view of Tsubakiyama, Rosenthal et al and Durst et al, as applied to claim 12 above, 
and further in view of Mills (US005915225A). 

Regarding claim 22, the combination of Dent et al, Tsubakiyama, Rosenthal et al 
and Durst et al fails to expressly disclose that the mobile terminal information is user 
settings information that a user of the mobile terminal has stored beforehand in a 
storage unit of the mobile terminal. 

In a similar field of endeavor, Mills discloses a system that allows the mobile 
telecommunications network to request and retrieve the desired subscriber information 
stored in a SIM card via over-the-air connection-less signals (see column 5, lines 1-13). 

It would have been obvious to a person of ordinary skill in the art at the time of 
the invention to modify the combination of Dent et al, Tsubakiyama, Rosenthal et al and 
Durst et al with Mills to include the above network requesting subscriber information in 
order to eliminate the need for a subscriber to verbally provide details or tediously enter 
a long series of numbers while on the phone as suggested by Mills (see column 4, line 
56 - column 5, line 13). 
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Response to Arguments 

Applicant's arguments filed April 27, 2007 have been fully considered but they 
are not persuasive. 

The Applicant argues the combination of Dent et al and Tsubakiyama et al fails to 
disclose the limitations of claims 1 and 5. The Examiner respectfully disagrees. 
Specifically, the Applicant argues the combination fails to disclose the limitations aimed 
at the random number generation occurring at the mobile device. This is what the 
Tsubakiyama reference is relied upon to suggest. When combined with Dent et al, one 
of ordinary skill in the art would recognize the random number generation could be 
performed at the mobile device instead of being received from the network. 

The Applicant argues neither Rosenthal et al nor Jiang et al disclose an 
authentication necessity table provided in the mobile terminal. The Examiner submits 
that when these references are combined with Dent et al, directed at bidirectional 
authentication, one of ordinary skill in the art would recognize the need to add the table 
at the mobile station, fulfilling the claimed limitations. 

The Applicant makes similar arguments with respect to the remainder of the 
claims, however, for the same reasons outlined above, the Examiner respectfully 
disagrees. 

Conclusion 

Applicant's amendment necessitated the new ground(s) of rejection presented in 
this Office action. Accordingly, THIS ACTION IS MADE FINAL. See MPEP 
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§ 706.07(a). Applicant is reminded of the extension of time policy as set forth in 37 
CFR 1.136(a). 

A shortened statutory period for reply to this final action is set to expire THREE 
MONTHS from the mailing date of this action. In the event a first reply is filed within 
TWO MONTHS of the mailing date of this final action and the advisory action is not 
mailed until after the end of the THREE-MONTH shortened statutory period, then the 
shortened statutory period will expire on the date the advisory action is mailed, and any 
extension fee pursuant to 37 CFR 1 .136(a) will be calculated from the mailing date of 
the advisory action. In no event, however, will the statutory period for reply expire later 
than SIX MONTHS from the date of this final action. 

Any inquiry concerning this communication or earlier communications from the 
examiner should be directed to Bryan J. Fox whose telephone number is (571) 272- 
7908. The examiner can normally be reached on Monday through Friday 9am - 5pm. 

If attempts to reach the examiner by telephone are unsuccessful, the examiner's 
supervisor, Charles N. Appiah can be reached on (571) 272-7904. The fax phone 
number for the organization where this application or proceeding is assigned is 571- 
273-8300. 
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Information regarding the status of an application may be obtained from the 
Patent Application Information Retrieval (PAIR) system. Status information for 
published applications may be obtained from either Private PAIR or Public PAIR. 
Status information for unpublished applications is available through Private PAIR only. 
For more information about the PAIR system, see http://pair-direct.uspto.gov. Should 
you have questions on access to the Private PAIR system, contact the Electronic 
Business Center (EBC) at 866-217-9197 (toll-free). If you would like assistance from a 
USPTO Customer Service Representative or access to the automated information 
system, call 800-786-9199 (IN USA OR CANADA) or 571-272-1000. 

Bryan Fox 
July 19, .2007 
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